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DETAILED ACTION 



1. 



The amendment filed 2/21/2007 has been placed of record in the file. 



2. 



Claims 1 and 9 have been amended. 



3. 



Claims 1-16 are now pending. 



4. The applicant's arguments with respect to claims 1-16 have been considered but are moot 
in view of the following new grounds of rejection. 



5. A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 .17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous office action has been withdrawn pursuant to 37 
CFR 1.1 14. The applicant's submission filed on 2/21/2007 has been entered. 



obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

7. Claims 1-16 are rejected under 35 U.S.C. 103(a) as being unpatentable over Rabne et al. 



Continued Examination Under 37 CFR LI 14 



Claim Rejections - 35 USC § 103 



6. 



The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 



(U.S. 



Patent Number 6,006,332), hereinafter referred to as Rabne, in view of Chan et al. (U.S. 
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Patent Number 6 5 5 05,300) 5 hereinafter referred to as Chan, further in view of Deng et al. (U.S. 
Patent Number 6,701 ,432), hereinafter referred to as Deng. 

8. Rabne disclosed a system for controlling access to digitized data utilizing a secure rights 
management server. In an analogous art, Chan disclosed a method for providing restricted 
execution contexts for untrusted content in a network. Also in an analogous art, Deng disclosed 
a gateway for screening packets transferred over a network. 

9. Concerning claims 1 and 9, Rabne did not explicitly state a client module configured to 
interface to a client operating system kernel and configured to enforce a set of usage rights 
within the operating system kernel. However, allowing a system to enforce access rights in an 
operating system kernel is well known in the art as evidenced by Chan whose system uses a 
security mechanism at the operating system level to determine usage rights for users or 
processes. It would have been obvious to one of ordinary skill in the art at the time of the 
applicant's invention to modify the system of Rabne by adding the ability to use a client module 
configured to interface to a client operating system kernel and configured to enforce a set of 
usage rights within the operating system kernel as provided by Chan. Here the combination 
satisfies the need for a system to control and monitor the access and use of restricted content on a 
network. See Rabne, column 3, lines 32-38. 

10. Also concerning claims 1 and 9, the combination of Rabne and Chan did not explicitly 
state obtaining the content on an individual block basis. Rabne, who teaches the distribution of 
intellectual property over a network, is not specific on how this content is transferred; for 
example Rabne is not specific as to whether it is transferred on an individual block basis. 
However, obtaining content comprising data blocks from content sources on an individual block 
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basis is well known in the art as evidenced by Deng whose system receives and screens each data 
block of content being transferred on an individual basis. It would have been obvious to one of 
ordinary skill in the art at the time of the applicant's invention to modify the combination of 
Rabne and Chan by adding the ability to obtain content on an individual block basis as provided 
by Deng. Here the combination satisfies the need for a system to control and monitor the access 
and use of restricted content on a network. See Rabne, column 3, lines 32-38. 

1 1 . Some claims will be discussed together. Those claims which are essentially the same 
except that they set forth the claimed invention as a method are rejected under the same rationale 
applied to the described claim. 

12. Thereby, the combination of Rabne, Chan, and Deng discloses: 
• <Claims 1 and 9> 

A dynamic file access control and management system configured to access one or more 
content sources including a set of content, said system comprising: A. a proxy system 
linked to said one or more content sources, said proxy system comprising an access 
control module configured to selectively obtain content comprising data blocks from said 
content sources on an individual block basis as a function of an authorization of a user 
requesting said content and a set of. access policies (Rabne, column 7, lines 5-9 and 
column 8, lines 55-67, where Deng teaches obtaining the data on an individual block 
basis, see Deng column 1, lines 35-46 and column 2, lines 39-59); B. a rights 
management module configured to generate a set of usage rights associated with said 
content as a function of a set of predefined usage policies associated with said content for 
said user (Rabne, column 8, lines 1 1-23); C. at least one client device having a client 
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module configured to interface to a client operating system kernel, said client module 
configured to enforce the set of usage rights within the operating system kernel without 
application rewrites (Rabne, column 6, lines 31-45 and Chan, column 5, lines 32-55 and 
column 11, lines 52-62); and D. one or more communication means, via which said 
content and said usage rights are provided to said client device (Rabne, column 3, lines 
52-59). 

• <Claims 2 and 10> 

The system according to claim 1, wherein said content and said usage rights are provided 
to said client device via different communication means (Rabne, column 10, lines 34-48). 

• <Claims 3 and 11> 

The system according to claim 1, wherein said content includes static content (Rabne, 
column 6, lines 53-60). 

• <Claims4and 12> 

The system according to claim 1 , wherein said content includes dynamic content (Rabne, 
column 6, lines 53-60). 

• <Claims 5 and 13> 

The system according to claim 1, wherein said communication means includes a secure 
transform configured to encrypt and encapsulate said content into a message as a function 
of a session ID and said client is configured to extract said content from said message 
(Rabne, column 7, lines 10-19). 
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• <Claims 6 and 14> 

The system according to claim 1, wherein said proxy system further includes a user 
interface, configured to facilitate creation and editing of said access policies and said 
usage policies and association of said access policies and said usage policies with said 
content (Rabne, column 18, lines 20-32 and 50-67). 

• <Claims 7 and 15> 

The system as in claim 1, wherein said client device is a device from a group comprising: 
1) a personal computer; 2) a workstation; 3) a personal digital assistant; 4) an e-mail 
device; 5) a cellular, telephone; 6) a Web enabled appliance; and 7) a server (Rabne, 
column 6, lines 31-45). 

• <Claims 8 and 16> 

The system of claim 1, wherein said proxy system and at least one of said content sources 
are hosted on the same computing device (Rabne, figure lb, item 22). 

Since the combination of Rabne, Chan, and Deng discloses all of the above limitations, claims 1- 

16 are rejected. 

Conclusion 

13. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Victor Lesniewski whose telephone number is 571-272-3987. 
The examiner can normally be reached on Monday through Thursday. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Bunjob Jaroenchonwanit can be reached on 571-272-3913. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 





Victor Lesniewski 
Patent Examiner 
Group Art Unit 2152 



